Does anyone have a full guide on how to host a web server behind a Starlink connection?

I manage to host web servers on IPv4 connections but I am pretty lost with IPv6. I don’t want to use a VPS or anything external.

My Starlink router is in bypass mode and I use a TP-Link AX3000 router

  • I have disabled the TP-Link router firewall
  • I have enabled IPv6 address in the router settings
  • I host a webserver (nginx) on my laptop and can access the page (on http://[::1]). No HTTPS set-up for the moment
  • I have disable ufw on my laptop
  • I have set-up a AAAA record on No-IP with the IPv6 address I get from https://test-ipv6.com/

It’s not working!

Which IPv6 address am I supposed to provide on No-IP, the one of my router or my laptop?!

I also have multiple IPv6 adresses on my laptop, which one should be used and why?

2: wlp1s0:  mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 48:e7:da:0e:52:2f brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.10/24 brd 192.168.0.255 scope global noprefixroute wlp1s0
       valid_lft forever preferred_lft forever
    inet6 2a0d:3344:89:e00:1287:789:2313:f88a/64 scope global temporary dynamic 
       valid_lft 295sec preferred_lft 295sec
    inet6 2a0d:3344:89:e00:132:2409:c6d:ce09/64 scope global dynamic mngtmpaddr noprefixroute 
       valid_lft 295sec preferred_lft 295sec
    inet6 fe80::6259:1c60:1deb:705e/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

Thanks

  • certuna@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    11 months ago

    Does the TP Link router allow you to create rules in the firewall to open specific ports towards specific endpoints?

    That’s how most routers do, but some only have a firewall on/off setting without the ability to create individual rules.

      • certuna@alien.topB
        link
        fedilink
        English
        arrow-up
        1
        ·
        11 months ago

        If I look at that screenshot it looks like you can define specific rules? The only problem i see is that you’re using link-local (fe80:: address) as the Local IP, that should be the stable global one (2a0d:xxxx:3040).